This website collects some personal data from its users.

Summary of the policy

Personal data collected for the following purposes and using the following services:

• Contact you – Contact form: personal data (email, name and phone number)
• Statistics – Google Analytics: personal data: (cookies and usage data)
• Advertising – AdWords Remarketing, Facebook Remarketing, Facebook Custom Audience: personal data (cookies and usage data)
• Registration and authentication – Direct registration: personal data (zip code, city, social security number, last name, date of birth, email, billing address, shipping address, country, first name, phone number, vat number, password, province, and various types of data)
• Integrated platform services and comments – Direct compilation: access the website with your own authentication
• Payment processing – PayPal and Stripe: personal data: various types of data as specified by the service’s privacy policy
• Integration with social networks and external platforms – Facebook, Instagram and YouTube: personal data (cookies and usage data)
• Contact management and message sending – Mailchimp: personal data (email)
• Google Fonts: personal data (usage data and various types of data as specified by the service’s privacy policy)
• Express Courier – Mail Boxes etc. (MBE): personal data (shipping address and various types of data related to it)

Contact information

Data Controller: Montecalvi Agricola S.r.l. with registered office in Italy at Via Citille, 85 – 50022 Greve in Chianti (FI) VAT no. 06767250480.

Holder’s email address: sales@montecalvi.com

Full policy

Data Controller: Montecalvi Agricola S.r.l. with registered office in Italy at Via Citille, 85 – 50022 Greve in Chianti (FI) VAT no. 06767250480.

Types of data collected

Among the personal data collected by this website, either independently or through third parties, are: cookies, usage data, name, phone number, and email.

Full details on each type of data collected are provided in the dedicated sections of this privacy policy or through specific informational texts displayed before the data is collected. Personal data may be freely provided by the user or, in the case of usage data, automatically collected during the use of this website.

Unless otherwise specified, all data requested by this website are mandatory. If you refuse to disclose them, it may be impossible for this website to provide the service. In cases where this website indicates certain data as optional, users are free to refrain from communicating such data, without this having any consequence on the availability of the service or its operation.

Users who are in doubt about which data is mandatory are encouraged to contact the owner. Any use of cookies – or other tracking tools – by this website or the owners of third party services used by this website, unless otherwise specified, is for the purpose of providing the service requested by the user, in addition to the additional purposes described in this document and in the cookie policy, if available.

The user assumes responsibility for the personal data of third parties obtained, published or shared through this website and guarantees that he/she has the right to communicate or disseminate them, releasing the owner from any liability to third parties.

Method and place of processing of collected data

Processing methods: the owner takes appropriate security measures to prevent unauthorized access, disclosure, modification or destruction of personal data.

The processing is carried out by means of computer and/or telematic tools, with organizational methods and logic strictly related to the indicated purposes.

The processing is carried out by means of computer and/or telematic tools, with organizational methods and logic strictly related to the indicated purposes.

An updated list of those responsible can always be obtained from the data controller.

Legal basis for processing: the owner processes personal data related to the user if one of the following conditions exists:

• The user has given consent for one or more specific purposes; Note: In some jurisdictions, the controller may be authorized to process personal data without the need for the user’s consent or another of the legal bases specified below, as long as the user does not object (“opt-out”) to such processing. However, this does not apply if the processing of personal data is regulated by European data protection legislation.
• Processing is necessary for the performance of a contract with the user and/or the execution of pre-contractual measures
• Processing is necessary to fulfill a legal obligation to which the owner is subject
• Processing is necessary for the performance of a task carried out in the public interest or in the exercise of public authority vested in the controller
• Processing is necessary for the pursuit of the legitimate interest of the owner or third parties

However, it is always possible to ask the controller to clarify the concrete legal basis of each processing and in particular to specify whether the processing is based on law, required by a contract or necessary to conclude a contract.

Location: data are processed at the owner’s operating offices and at any other place where the parties involved in the processing are located. For more information, contact the owner.

The user’s personal data may be transferred to a country other than the one where the user is located. To obtain more information about the location of processing, the user can refer to the section on personal data processing details.

You have the right to obtain information regarding the legal basis for the transfer of data outside the European Union or to an international organization under public international law or consisting of two or more countries, such as the UN, as well as regarding the security measures taken by the data controller to protect the data.

Should any of the transfers just described take place, the user may refer to the respective sections of this document or request information from the owner by contacting him at the contact details given at the beginning.

Should any of the transfers just described take place, the user may refer to the respective sections of this document or request information from the owner by contacting him at the contact details given at the beginning. Therefore:

• Personal data collected for purposes related to the performance of a contract between the owner and the user will be retained until the performance of that contract is completed
• Personal data collected for purposes attributable to the legitimate interest of the owner will be retained until that interest is satisfied. You may obtain additional information regarding the legitimate interest pursued by the owner in the relevant sections of this document or by contacting the owner

When processing is based on the user’s consent, the controller may keep personal data longer until that consent is revoked. In addition, the owner may be required to retain personal data for a longer period in compliance with a legal obligation or by order of an authority.

At the end of the retention period, personal data will be deleted. Therefore, upon the expiration of this period, the right of access, deletion, rectification and the right to Data portability can no longer be exercised.

Purposes of processing of collected data

User data is collected to enable the owner to provide its services, as well as for the following purposes: improving user experience, statistics, displaying content from external platforms, contacting the user and SPAM protection.

To obtain further detailed information on the purposes of processing and the personal data concretely relevant for each purpose, you may refer to the relevant sections of this document.

Details on the processing of personal data

Personal data are collected for the following purposes and using the following services:

• Contacting you: by filling out the contact form with your data, you consent to their use to respond to requests for information, quotes, or any other nature indicated by the header of the form

Personal data collected: email, name, and phone number.

• Statistics – Google Analytics: personal data (cookies and usage data)

Google Analytics (Google Inc.): Google Analytics is a web analytics service provided by Google Inc. (“Google”). Google uses the personal data collected for the purpose of tracking and examining the use of this website, compiling reports, and sharing them with other services developed by Google. Google may use personal data to contextualize and personalize ads in its ad network. Personal data collected: cookies and usage data.
Place of processing: United States – Privacy Policy – Opt Out. Privacy Shield adherent subject.

• Advertising – Facebook Remarketing, Facebook Custom Audience: personal data (cookies and usage data)

Facebook Remarketing (Facebook, Inc.): Facebook Remarketing is a remarketing and behavioral targeting service provided by Facebook, Inc. linking the activity of this website with the Facebook advertising network.
Personal Data Collected: Cookies and Usage Data.
Place of processing: United States – Privacy Policy – Opt Out. Privacy Shield adherent subject.

Facebook Custom Audience (Facebook, Inc.): Facebook Custom Audience is a remarketing and behavioral targeting service provided by Facebook, Inc. linking the activity of this website with the Facebook advertising network.
Personal data collected: cookies and email.
Place of processing: United States – Privacy Policy – Opt Out. Privacy Shield adherent subject.

• Registration and authentication – Direct registration: personal data (zip code, city, social security number, last name, date of birth, email, billing address, shipping address, country, first name, phone number, vat number, password, province, and various types of data)
• Integrated platform services and comments – Direct compilation: personal data (website access with own authentication)
• Payment processing – PayPal and Stripe: personal data (various types of data as specified by the service’s privacy policy)

PayPal (PayPal Holdings, Inc.): PayPal is a company that offers digital payment and money transfer services over the Internet. In Italy it offers financial services to its customers by operating as a credit institution.
Personal data collected: various types of data as specified by the privacy policy of the service.
Place of processing: United States – Privacy Policy. Privacy Shield adherent subject.

Stripe (Stripe, Inc.): Stripe is a company that offers digital payment and money transfer services via the Internet. In Italy it offers financial services to its customers by operating as a credit institution.
Personal data collected: various types of data as specified by the privacy policy of the service.
Place of processing: United States – Privacy Policy. Privacy Shield adherent subject.

Integration with social networks and external platforms – Facebook, Instagram and YouTube: personal data (cookies and usage data).

This type of service allows for interactions with social networks, or other external platforms, directly from the pages of this website. Interactions and information captured by this website are in each case subject to the user’s privacy settings related to each social network. Le interazioni e le informazioni acquisite da questo sito web sono in ogni caso soggette alle impostazioni sulla privacy dell’utente relative a ciascun social network.

Facebook (Facebook Inc.): personal data collected (cookies and usage data).
Place of processing: United States – Privacy Policy. Privacy Shield adherent subject.

Instagram (Instagram Inc.): personal data collected (cookies and usage data).
Place of processing: United States – Privacy Policy. Privacy Shield adherent subject.

YouTube (YouTube LLC.): personal data collected (cookies and usage data).
Place of processing: United States – Privacy Policy. Privacy Shield adherent subject.

• Contact management and message sending – Mailchimp: personal data (email)

Mailchimp (Rocket Science Group LLC): personal data collected (email).
Place of processing: United States – Privacy Policy. Privacy Shield adherent subject.

• Displaying content from external platforms – Google Fonts: personal data (cookies and usage data).

Google Fonts (Google Inc.)
Google Fonts is a font style display service operated by Google Inc. which allows this website to integrate such content within its pages.
Place of processing: United States – Privacy Policy. Privacy Shield adherent subject.

Express Courier – Mail Boxes etc. (MBE) personal data (shipping address and various types of data)

Mail Boxes etc. (MBE)
Mail Boxes etc. is is a transportation company offering international freight transportation and logistics contracts owned by Mail Boxes etc.
Personal Data Collected: shipping address and various types of data.
Place of processing: Italy – Privacy Policy.

User Rights

Users can exercise certain rights with reference to the data processed by the owner.
In particular, the user has the right to:

• Withdraw consent at any time. Users may revoke their previously expressed consent to the processing of their personal data
• Oppose the processing of one’s own data. Users may object to the processing of their data when it is done on a legal basis other than consent. Further details on the right to object are given in the section below
• Access your own data. You have the right to obtain information about the data processed by the owner, certain aspects of the processing, and to receive a copy of the processed data
• Verify and request rectification. Users can check the accuracy of their data and request that it be updated or corrected
• Obtaining restriction of processing. When certain conditions are met, the user may request that the processing of his or her data be restricted. In this case, the owner will not process the data for any purpose other than its storage
• Obtain the deletion or removal of your personal information. When certain conditions are met, users may request that their data be deleted by the owner
• Receive their data or have their data transferred to another owner. You have the right to receive your data in a structured, commonly used, machine-readable format and, where technically feasible, to have it transferred unimpeded to another data controller. You have the right to receive your data in a structured, commonly used, machine-readable format and, where technically feasible, to have it transferred unimpeded to another data controller.
• Propose complaint. You may file a complaint with the relevant data protection supervisory authority or take legal action.

Details on the right to object: when personal data are processed in the public interest, in the exercise of public authority vested in the controller, or in pursuit of a legitimate interest of the controller, users have the right to object to the processing on grounds related to their particular situation.

Users are advised that if their data were processed for direct marketing purposes, they can object to the processing without providing any reasons.rticular. To find out whether the owner processes data for direct marketing purposes, users can refer to the respective sections of this document.

How to exercise rights: to exercise user rights, users can address a request to the owner’s contact details given in this document. Requests are filed free of charge and processed by the holder as soon as possible, in any case within one month.

Cookie police: this website makes use of cookies. To learn more and to view the detailed policy, the user can consult the Cookie Policy.

More information about the treatment

Defense in court: your personal data may be used by the owner in court or in the preparatory stages of its possible establishment for defense against abuse in the use of this website or related services by the user.

The user declares that he/she is aware that the owner may be obliged to disclose the data by order of public authorities.

Specific disclosures: upon your request, in addition to the information contained in this privacy policy, this website may provide you with additional and contextual disclosures regarding specific services, or the collection and processing of personal data.

System logs and maintenance: for needs related to operation and maintenance, this website and any third-party services it uses may collect system logs, which are files that record interactions and may also contain personal data, such as user IP address.

Information not contained in this policy
Further information in relation to the processing of personal data may be requested at any time from the data controller using the contact details.

Response to “Do Not Track” requests: this website does not support “Do Not Track” requests. To find out whether any third-party services you use support them, you are encouraged to consult their respective privacy policies.

Changes to this privacy policy: the data controller reserves the right to make changes to this privacy policy at any time by giving notice to users on this page and, if possible, on this website as well as, if technically and legally feasible, by sending a notification to users through one of the contact details held by the data controller.

Therefore, please consult this page regularly, referring to the date of last modification indicated at the bottom.

If the changes affect processing whose legal basis is consent, the owner will re-collect the user’s consent, if necessary.

Definition and legal references

Personal data (or data): personal data is any information that, directly or indirectly, including in conjunction with any other information, including a personal identification number, makes a natural person identified or identifiable.

Usage data: this is the information collected automatically through this website (including by third party applications integrated into this website), including: the ip addresses or domain names of the computers used by the user who connects with this website, the addresses in uri (Uniform Resource Identifier) notation, the time of the request, the method used in forwarding the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response from the server (successful, error, etc. ) the country of origin, the characteristics of the browser and operating system used by the visitor, the various temporal connotations of the visit (for example, the length of time spent on each page) and the details of the itinerary followed within the application, with particular reference to the sequence of pages consulted, the parameters relating to the user’s operating system and computer environment.

User: the individual using this website who, except where otherwise specified, coincides with the data subject.

Data subject: the natural person to whom the personal data refer.

Data Processor (or Processor): the natural person, legal entity, public administration and any other entity that processes personal data on behalf of the owner, as set out in this privacy policy.

Data Controller (or Controller): the natural or legal person, public authority, service or other body which, individually or jointly with others, determines the purposes and means of the processing of personal data and the means adopted, including the security measures relating to the operation and use of this website. The data controller, unless otherwise specified, is the owner of this website.

This website (or this Application): the hardware or software tool by which users’ personal data are collected and processed.

Service: the service provided by this website as defined in the relevant terms (if any) on this website/application.

European Union (or EU): unless otherwise specified, any reference to the European Union in this document shall be deemed to extend to all current member states of the European Union and the European Economic Area.

Cookie: small portion of data stored within the user’s device.

Legal references: this privacy policy is prepared on the basis of multiple legislative orders, including Articles 13 and 14 of Regulation (EU) 2016/679.

Unless otherwise specified, this privacy policy covers this website only.